AZ-900 Practice Test 18 — 15 Questions

Question 1

A cloud provider purchases hardware in bulk and shares physical infrastructure among many customers, which allows them to offer lower prices per customer. This benefit is known as:

Accepted Answer

Economies of scale. Economies of scale refer to the cost advantage that cloud providers achieve by purchasing hardware in bulk and sharing physical infrastructure across many customers. This reduces the per-unit cost of compute, storage, and networking resources, enabling providers to offer lower prices per customer. The scenario directly describes the cost benefits of large-scale operations, which is the defining characteristic of economies of scale.

Answer

Elasticity

Answer

Resource pooling

Answer

High availability

Question 2

A company has multiple Azure subscriptions for different projects. They want to apply a common set of policies and role assignments to all subscriptions under the 'Research' department. They also plan to add more subscriptions for Research in the future. What should they use?

Accepted Answer

Azure management group. Azure management groups allow you to efficiently manage access, policies, and compliance across multiple Azure subscriptions. By placing all 'Research' subscriptions under a single management group, you can apply a common set of Azure Policy assignments and Azure role-based access control (RBAC) assignments at the management group scope, which automatically cascades to all current and future subscriptions within that group. This hierarchical structure is specifically designed for enterprise-scale governance across departments.

Answer

Azure resource group

Answer

Azure Blueprint

Answer

Azure Policy initiative

Question 3

Which feature allows Azure administrators to require users to complete an additional verification step (beyond password) before accessing Azure resources?

Accepted Answer

Azure Active Directory Multi-Factor Authentication. Azure Active Directory Multi-Factor Authentication (MFA) is the correct feature because it specifically requires users to provide an additional form of verification (e.g., a phone call, text message, or app notification) beyond just a password before accessing Azure resources. This directly addresses the need for an extra security step, which is the core of MFA. Azure RBAC, Policy, and PIM do not enforce additional authentication factors.

Answer

Azure RBAC

Answer

Azure Policy

Answer

Azure Privileged Identity Management

Question 4

A company has a management group hierarchy: Root → UK → Production. They assign a policy at the Root level that allows only certain VM sizes. Later, they assign another policy at the UK level that denies all resources. What is the effective effect on the Production subscription?

Accepted Answer

Both policies apply, and the most restrictive (Deny) takes precedence.. D is correct because Azure Policy is inherited and cumulative down the management group hierarchy. The Root-level policy (allow only certain VM sizes) and the UK-level policy (deny all resources) both apply to the Production subscription. When a deny policy conflicts with an allow policy, the deny effect always takes precedence, making the most restrictive policy effective.

Answer

Only the Root policy applies because it is at the highest level.

Answer

Only the UK policy applies because it is more specific.

Answer

Both policies apply, and the order of evaluation could cause a conflict.

Question 5

What does the Azure 'Reliability' pillar of the Well-Architected Framework focus on?

Accepted Answer

Ensuring workloads recover from failures and meet availability requirements. The Azure Well-Architected Framework's Reliability pillar is specifically designed to ensure that workloads can recover from failures and meet defined availability and resiliency targets. This involves designing for fault tolerance, implementing redundancy across regions or availability zones, and using features like Azure Site Recovery and Azure Load Balancer to maintain service continuity. The core goal is to minimize downtime and data loss, which directly aligns with option B.

Answer

Reducing unnecessary resource provisioning to minimize costs

Answer

Encrypting all data and managing access identities

Answer

Monitoring resource performance and responding to performance alerts

Question 6

Which Azure service provides enterprise-grade, distributed message queuing with features like guaranteed delivery and FIFO ordering?

Accepted Answer

Azure Service Bus queues. Azure Service Bus queues are the correct choice because they are designed for enterprise-grade messaging with support for guaranteed delivery (at-least-once or exactly-once semantics) and strict FIFO ordering through sessions. Unlike simpler queue services, Service Bus provides advanced features like dead-lettering, message deferral, and transactional support, making it suitable for mission-critical application integration.

Answer

Azure Queue Storage

Answer

Azure Event Hubs

Answer

Azure Event Grid

Question 7

Which feature of Azure subscriptions allows an organization to separate billing and access management for different departments?

Accepted Answer

Multiple subscriptions. Multiple subscriptions allow an organization to create separate billing invoices and independent access management boundaries for different departments. Each subscription has its own billing relationship and can be assigned distinct Azure AD tenants or RBAC configurations, enabling cost tracking and administrative isolation per department.

Answer

Resource groups

Answer

Azure tags

Answer

Azure RBAC

Question 8

A company needs to host a website that must automatically scale to handle millions of concurrent users during peak events. Which Azure architecture BEST supports this?

Accepted Answer

Azure App Service with autoscaling and Azure Front Door. Azure App Service with autoscaling and Azure Front Door is the best choice because it provides a fully managed platform for web applications that can automatically scale out (add instances) based on demand, while Azure Front Door offers global load balancing and acceleration at Layer 7 (HTTP/HTTPS) to distribute traffic across multiple regions. This combination ensures the website can handle millions of concurrent users during peak events without manual intervention.

Answer

Single Azure VM with manual scaling

Answer

Azure Blob Storage static website

Answer

Azure VMs without load balancing

Question 9

A company needs to store backup data that must be retained for 7 years. They want to store the data as cheaply as possible, and access may be rare. Which Azure Storage access tier is most cost-effective?

Accepted Answer

Archive tier. The Archive tier is the most cost-effective option for data that must be retained for 7 years with rare access. It offers the lowest storage cost among Azure Blob Storage access tiers, specifically designed for long-term retention where retrieval latency of up to 15 hours is acceptable. This aligns perfectly with the requirement to minimize cost while meeting the 7-year retention period.

Answer

Hot tier

Answer

Cool tier

Answer

Premium tier

Question 10

Which Azure feature enables you to create custom roles with specific permissions when built-in RBAC roles do not meet your requirements?

Accepted Answer

Custom RBAC role definitions. Custom RBAC role definitions allow you to create roles with granular permissions tailored to your specific needs when built-in roles are insufficient. This Azure feature uses JSON-based role definitions that specify actions, notActions, dataActions, and assignable scopes to control access to Azure resources.

Answer

Azure AD application permissions

Answer

Azure Policy custom definitions

Answer

Azure AD group membership rules

Question 11

A company wants to deploy a web app that scales automatically based on demand. They do not want to manage any virtual machines or the underlying infrastructure. They only want to upload their code and let the platform handle everything. Which Azure compute service should they choose?

Accepted Answer

Azure App Service. Azure App Service is a fully managed platform-as-a-service (PaaS) offering that enables developers to deploy web applications without managing virtual machines or underlying infrastructure. It provides built-in autoscaling, load balancing, and patching, allowing the company to simply upload their code and let the platform handle scaling based on demand.

Answer

Azure Virtual Machines

Answer

Azure Functions

Answer

Azure Container Instances

Question 12

A company wants to move their on-premises data center to Azure to take advantage of the ability to quickly provision new environments for development and testing on demand, reducing time-to-market. Which cloud benefit is this an example of?

Accepted Answer

Agility. Agility refers to the ability to rapidly provision and de-provision resources as needed, which directly aligns with the scenario of quickly creating new development and test environments on demand. In Azure, this is enabled by Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) offerings, allowing teams to spin up virtual machines, databases, and networks in minutes using Azure Resource Manager (ARM) templates or the Azure portal. This reduces time-to-market by eliminating the procurement and setup delays typical of on-premises data centers.

Answer

Scalability

Answer

Reliability

Answer

Security

Question 13

What is the role of a cloud provider's physical datacenter security in the shared responsibility model?

Accepted Answer

Physical security is entirely the cloud provider's responsibility. In the shared responsibility model, physical security of the datacenter—including access controls, surveillance, and environmental controls—is always the sole responsibility of the cloud provider (e.g., Microsoft Azure). The customer never manages or is responsible for the physical infrastructure, regardless of the service model (IaaS, PaaS, SaaS). This is because the customer has no physical access to the datacenter and cannot implement or control physical security measures.

Answer

Both the cloud provider and customer share responsibility for physical security

Answer

Customers are responsible for physical security when using IaaS

Answer

Physical security responsibility depends on the customer's support plan level

Question 14

Which of the following is NOT a benefit of moving to cloud computing?

Accepted Answer

Elimination of all internet dependencies. Cloud computing inherently relies on internet connectivity to access resources and services. While some hybrid or private cloud setups may use dedicated connections like Azure ExpressRoute, the elimination of all internet dependencies is not a benefit—in fact, cloud services require network connectivity, and any claim of removing that dependency is false.

Answer

Reduced capital expenditure on hardware

Answer

Ability to scale resources on demand

Answer

Access to the latest hardware and technology

Question 15

A company wants to ensure that all Azure resources are tagged with a 'CostCenter' tag at creation time. If a resource is created without the tag, it should be automatically denied. Which Azure Policy effect should they use?

Accepted Answer

A) deny. The 'deny' effect is correct because it actively blocks any resource creation request that does not include the required 'CostCenter' tag. Azure Policy with the 'deny' effect evaluates the resource against the policy rule at creation or update time and rejects the request if the condition is not met, ensuring compliance before the resource is provisioned.

Answer

B) audit

Answer

C) append

Answer

D) deployIfNotExists